A fix is available
APAR status
Closed as program error.
Error description
In RACF DataSharing Mode, a change to a security-sensitive field in a user profile causes RACF to delete that User's cached object from the VLF Class IRRACEE. It also updates the ICB counts for other sharing systems to do a full VLF Purge of IRRACEE. In DataSharing Mode, the full Purge is not needed because the sharing systems will be receiving an XCF Message from the original system denoting which User's object to delete. Removing the VLF Purge will preserve the cached data for all the other users and save time when those users login again. This time includes the arduous task of evaluating a KDFAES password via the CPACF feature. RACFPWENCR/K
Local fix
BYPASS/CIRCUMVENTION: //ZAP EXEC PGM=IMASPZAP //SYSPRINT DD SYSOUT=* //SYSLIB DD DSN=SYS1.LPALIB,DISP=SHR //SYSIN DD * /* for UA83174 NAME IRRMNGR IRRMRD00 VER 275E 9602,93EA VER 2762 5840,5150 REP 275E 9600 /* //SYSIN DD * /* for UA75269 NAME IRRMNGR IRRMRD00 VER 2756 9602,93EA VER 275A 5840,5150 REP 2756 9600 /* RECOVERY ACTION: Stop changing user profiles (which is hard to do as a bad password during a login will suffice).
Problem summary
**************************************************************** * USERS AFFECTED: Users whose installations run RACF in data * * sharing mode, and utilize the IRRACEE VLF * * cache. * * SYSPLXDS * **************************************************************** * PROBLEM DESCRIPTION: * **************************************************************** * RECOMMENDATION: * **************************************************************** Users whose installations run RACF in data sharing mode, and utilize the IRRACEE VLF cache may experience excessive purging of the IRRACEE VLF cache.
Problem conclusion
Users whose installations run RACF in data sharing mode, and utilize the IRRACEE VLF cache may see less purging of that cache. SYSPLXDS
Temporary fix
********* * HIPER * *********
Comments
APAR Information
APAR number
OA52226
Reported component name
RACF
Reported component ID
5752XXH00
Reported release
790
Status
CLOSED PER
PE
NoPE
HIPER
YesHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2017-03-07
Closed date
2017-03-17
Last modified date
2017-04-21
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UA91331 UA91347
Modules/Macros
IRRMRW00
Fix information
Fixed component name
RACF
Fixed component ID
5752XXH00
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"790","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":null,"label":null},"Product":{"code":"SG19O","label":"APARs - MVS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"790","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
21 April 2017